Behavioral task
behavioral1
Sample
e3c4cd2512acd3db1fbf001e740badc76fc8d60f90db30c1ce930d17a1935257.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e3c4cd2512acd3db1fbf001e740badc76fc8d60f90db30c1ce930d17a1935257.dll
Resource
win10v2004-20221111-en
General
-
Target
e3c4cd2512acd3db1fbf001e740badc76fc8d60f90db30c1ce930d17a1935257
-
Size
76KB
-
MD5
57b967a28928aedd6860e743458fa974
-
SHA1
0c990cca8fd03ffbb71c0aab63b6c58ba4a4a393
-
SHA256
e3c4cd2512acd3db1fbf001e740badc76fc8d60f90db30c1ce930d17a1935257
-
SHA512
67a99f38006123d2b7ffc665d7101599ddbebb630c13f64dcf260c5153934d8b0827d0f8df8304ee82c7a84ee2b1b971a3e495dee88db96bdf364abf7c5ebe99
-
SSDEEP
1536:C4Qpe2e5+ZIUis6Gzc0KaU4M1xaNNtNMvAzCY5Yy13GQ6tHD9ABAHWb8A:1QM2I+ZIUi/GzVjU4Kx+dDqy5ax46ef
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
e3c4cd2512acd3db1fbf001e740badc76fc8d60f90db30c1ce930d17a1935257.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdata Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wihyjyw Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 50KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE